On this page i am going to explain how to recover your self made USB Rubber Ducky to a regular USB Stick
So now that u made your own USB Rubber Ducky using my guide HERE
you may come to a point where u want to recover the converted stick back to a normal Flash drive
you also need to recover it to a normal flash drive every time you want to flash a new payload on the USB Stick
so now i am going to explain you how to do this
Step One:
Download this file: HERE
For convenience save this file to c:\fw\fw_bn
This will give u this file as a result at that location
MPALL_v3.71.0A_03_MLC(UP03_64pin).rar
Now right click on the file and select Extract Here
Open the folder MPALLv3.710A_03MLC(UP03 64pin)
u should then see this
Now double click on MPALL_F1_9000_v371_0A.exe
u should then be in the software tool to recover the USB Stick
like seen below
Keep shorting this pins while plugging in the USB Stick
u should then come to this window
U now successfully flashed the USB Stick back to stock!
I have got the MPALL program but when I plug the USB into the computer I got the following message F: Mode 255 ID Error 000
Did u short the pins while plugging it in? And are you sure u have a Phison 2251-03 ?
Hi pentestshop,
the progress bar hang at “ISP – Firmware” and, after a while, show the error message “CT – Read OnlyPage” with red background.
What can I do to solve this problem?
Thank you in advance,
Carlo
P.S.: I transformed Kingston DT R3.0 into Duck after the S.O. doesn’t mount and show the drive…
Hi Carlo,

Make sure u have selected the right Burner Image
and the correct firmware file
and that all the other settings are correct.
If you still have problems i would love to take a look at it using Teamviewer
Then contact me at pentestingshop@gmail.com
Hi guys , how do to short the two pins ????? It’very very very difficult for me , you know tell me how to do easy tips??
It’s indeed difficult to keep shortening the pins while plugging it in,but i’m afraid there is no other option..You could try to solder 2 wires on the pins..But i dont know how good your solder skills are.
the origianl usb duky is not in stock ?
I dont sell those..U need to order them from Hak5
the solder on two pins can always be welded or it must be whenever detached ??
Just solder the wires on the 2 pins and strip the other end and shorten them only when u need to reflash the stick back to normal.
thanks a lot 😉 but i have the last question … you assure me that the pins to solder are the second and third ?? beacause in another tutorial i have read that are the 1&2 … i have usb stick DataTravel DT111 with Phison 2251-03
No its pin 2 and 3 for a Corsair at least
hi guys , i have a Datatraveler 111 8gb with Phison 2251-03 :
Device Vendor: Phison
Device Name: 2303 Boot ROM
Device Revision: 0110
Product Model: 2303 PRAM
Product Revision: 1.00
Chip Vendor: Phison
Chip Part-Number: PS2251-03(PS2303) – F/W 01.01.10 [2012-04-09]
I follow the tutorial for recover a usb-stick but when Start the recover , show this error : CT 0x1049 ( look the image ) http://i64.tinypic.com/25u6sdt.jpg
Can you help me please 🙁 ??????
Image of screenshot MPALL http://s31.postimg.org/dhn6pycjv/step3.jpg
Make sure u use the right burner bin file for your USB Stick..I dont know what one u should use for the Datatraveler..But check usbdev.ru
make you sure that usb Port is 2.0 or 3.0 i have to change it, and work for me
Did I miss it somewhere it says that be sure to have EVERY payload you want when you create the Rubber Ducky because reverting it to add more payloads is a nightmare?!
please can help to get Burner and firmware for
Volume: H:
Controller: Phison 2251-61 (2261)
Possible Memory Chip(s):
Toshiba TH58NVG7T2HTA20
Toshiba TC58NVG6T2HTA00
Memory Type: TLC
Flash ID: 98DE9892 7256
Chip F/W: 01.01.10
Firmware Date: 2011-01-26
MP Ver.: MPALL vFF.FF.FF
VID: 13FE
PID: 3E00
Manufacturer:
Product: 2261 PRAM
Query Vendor ID:
Query Product ID: 2261 PRAM
Query Product Revision: 1.00
Physical Disk Capacity: 0 Bytes
Windows Disk Capacity: 0 Bytes
Internal Tags: 2QAF-AV3L
USB Version: 2.00
Declared Power: 50 mA
ContMeas ID: C201-07-00
Microsoft Windows 10 x64 Build 10586
————————————
http://www.antspec.com/usbflashinfo/
Program Version: 8.7.0.597
You are trying to do it with a wrong nand chipset, sadly it only works with the Phison 2251-03 nand
I really need some help with the recovery of my usb stick. When i plug it in and shorted the pins it will just shows this.
https://gyazo.com/6a912a47c368aef05721037a95b14f82
i would love to help you,but first tell me what USB Stick you have!..Cause if you have another brand of USB Stick then the one i recommended that u should maybe use another version of MPAll
Yea i have the Patriot Supersonic Xpress 16gb and checked it with GetFlashInfo and it has Phison 2251-03
add pentestingshop on facebook and pm me, maybe i can help using teamwiever
I did everything as told, but when it detects my pendrive (which is recommended Patriot Supersonic Xpress btw) it returns: Mode 255 ID Error 0001.
Thank you for your help!
yeah you may have a Patriot Supersonic Xpress that is indeed in the list on github, but did you check it first with GetFlash info that is has the Phison 2251-03 chipset?
Cause now these day they deliver them with a Phison 2207 nand chip
I kinda removed the pin 1 and 2 and still it does not work :/
U removed the pin1 and 2 ?
I hope u didn’t break them off 🙂
U need to short pin 2 and 3 while plugging it in
use some wire to short pin 2-3 and just plug it in while keeping it shorted
I cannot get the pins to short. Nothing will work without shorting the pins, and they will not short.
Hi, I’ve done all the steps to configure the Kingston DT111 (PS2251-03 (PS2303)), all the steps worked, but when removing and inserting again, the rubber ducky did not work. I thought I did something wrong, so I tried to recover, but my USB does not appear on the MPALL screen (even if I make the short circuit on pin 2 and 3), nothing opens. I connected on linux and tried the command “lsusb” but find nothing, what could have done wrong? How can I check if it does not burn(broke)? Thank you for you help.
That’s weird, did you try other USB Ports as well?
And did u short the pins correctly?
Also if the Kingston DT111 is a USB 3.0 stick (Blue USB Plug) u need to use a USB 3 port to connect to MPALL
And did u checked the chipset using the Getflash info tool, or did u assume it has the PS2251-03 chipset?
Yes I tried all ports, try with a normal pen drive and they are all working, when I insert the normal pen drive in linux and give the command “lsusb” the new device appears but with the USB that I modified nothing happens.
About the short circuit I was trying with other pins, I was making the wrong short circuit and after I tried on pins 2 and 3, so I think I should have burned the chip when I made the short circuit on the wrong pins . I did setup on MPALL USB 3 and USB 2 as well.
Before starting the all procedure, I checked the chipset and it`s PS2251-03 (PS2303) with firmware of the year 2012.
I have a rubber ducky deluxe from hak5, but for a long time I’ve been looking for a pen drive to make my own rubber ducky. Unfortunately I’m having a hard time finding a pen drive with this chipset, it was more than 1 month searching on ebay for a used pen drive with this chipset. Do you know of any site where I can find a pen drive with this chipset?
Thank very much for your attention.
My memory is 2303 and short pin 2 and 3 while plugging
But when push start button, CT. 0x0040 was showed in the box not CT. Test finished ~~
I’m finding some document on google but not easy to find something can help.
Do you know what’s wrong??
and during working(actually i just try to input other bin file), my memory was not recognized. But short pin 2 and 3, sometimes it was recognized.
Can I back to work??
Sorry but do not try to do it with that stick..I can not help with that kind
What can I do if I get a this message: “Flash No Suppot”
Did u use a USB Stick with a Phison 2251-03 nand chip? And if so try looking for another version of Phison MPALL and always use the right burner image and firmware for your USB Drive!
Hi pentestshop, thank you for your guides. They are greats and very detailed.
I created the rubber duck from a pendrive and it worked successfully.
Although I tested the device with two laptops with Win7 and Win8.1 and it doesn’t work on Win8.1 and in Win7 it only works on some USB ports, not on all of them. Windows doesn’t install the same drivers for all USB ports, so sometimes Windows doesn’t recognise the device. Is this usual? If I bought the original rubber duck would the same happen? or would it work better?
I’d like to test another payload. I’m following this guide. I got a question about: ‘Keep shorting this pins while plugging in the USB Stick’
Should I short the pins 2 and 3 only when I plug the device and until I press Update, or should I keep shorting the pins the whole time the device is plugged?
Thank you in advance.
Thank you Javi for the kindly comment
And i never experienced the problem that it works on some port’s and not all.
If u buy a real USB Rubber Ducky u wont experience that problem i guess
And about your question how u should shorten the pins
Yes u only short the pins 2 and 3 while plugging it in and until you see the Drive listed in the Phison MPALL software
Hi, I’ve tried the recovery way, shorting pins 2&3 the whole time, if not the payload was loaded.
But when I click on update the field that is filled is G255-2 and inside appears:
Driver : G: Mode 255
ID Error 0001 [ 0 0 0 0 0 0 0]
You can see a screenshoot here: https://ibb.co/hLTrt5
I tried to follow the rest of the process: settings, save, start… but nothing happens.
I also tried it with pins 1&2 but the app doesn’t recognise it.
What am I doing wrong?
Thank you.
Keep trying or try looking for another version of Phison MPALL that has support for a Phison 2251-03
Shortening the pins is a pain sometimes, but if u do it right u should get it working
This is how I shortened the 2 and 3 pins on my Corsair Voyager LS 16:
1. Take a small flathead screwdriver screw driver (like this one: https://www.aliexpress.com/item/Mini-Flathead-screwdriver-Straight-screwdriver-Slot-type-Screw-driver-for-iPhone-Cell-phone-Factory/901606546.html?spm=2114.40010408.3.25.6a6DhV)
2. Put the USB stick close to the insertion port – don’t plug it in. It should only touch the port.
3. Put the flathead screwdriver firmly, but not too firmly (you don’t want to destroy the circuit board), and push in the USB stick.
4. Click ‘Update’ in the MPAII program and you should be good to go.
Disclaimer: I take no responsibility if you ruin your USB stick. Proceed at your own “USB” risk.
Note to step 3: Put the flathead screwdriver firmly between pin 2 and 3 to create a bridge between the pins.
What pins i need to shred if i have the Silicon Power 32GB Blaze B30 (SP032GBUF3B30V1K)
Probably the same if it’s a Phison 2251-03 nand chip
I could not format usb drive which has IC version 2251-60/90 due to absence of Bin files.Pls help me to overcome the issue,same USB drive has write protected,Thanks.
Finally my pendrive is back..thank you so much……